CVE-2026-48290

Katalog CVE

CVSS 8.2 · High EPSS 0,30%

Kerentanan Server-Side Request Forgery (SSRF) pada adobe c2pa, adobe c2pa-web +1 lainnya. Skor CVSS 3.1 8.2 (High) menurut adobe.com.

Deskripsi (NVD)

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Rincian

Terbit di NVD

14 Juli 2026

Terakhir diubah

28 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

8.2 (High), sumber adobe.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 20,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-80.html advisory vendor